Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
File: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer (raw, json)
Hash identifier: DQNS2fiSCXWb3IyYD6SWRGubCWQLC58RGd0rwRodh00=
Subject key identifier: D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial: 1E13DA807E00D4A55EAE7FEF57DD7E149B8EA19D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
caRepository: rsync://rpkica.twnic.tw/rpki/MINGXI/1/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:48:34 +0000
Certificate not after: Mon 10 May 2027 15:53:34 +0000
Subordinate resources: IP: 138.252.116.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:13:da:80:7e:00:d4:a5:5e:ae:7f:ef:57:dd:7e:14:9b:8e:a1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Validity
Not Before: May 11 15:48:34 2026 GMT
Not After : May 10 15:53:34 2027 GMT
Subject: CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:63:dd:c5:9b:28:45:83:ef:72:1d:1b:52:
1b:e7:9d:51:6c:81:e0:32:73:12:62:5e:3e:1d:d2:
2d:dd:f5:ff:09:30:eb:bb:8c:3f:08:ae:0b:54:49:
8d:42:b3:4d:1d:7a:37:1e:c7:d1:28:bf:b7:24:bd:
af:97:d6:0a:d9:5f:9f:46:c8:16:ab:4a:e0:2c:7c:
2c:5a:6e:54:79:1b:88:6b:79:df:fb:25:a8:e2:ad:
d7:85:c6:3c:08:94:6a:a2:79:d6:1b:52:d6:de:3b:
54:c8:3c:6b:aa:35:8a:33:23:11:7c:f7:77:49:df:
8e:af:55:96:29:7b:cc:d2:e4:72:c9:72:ba:75:a8:
ea:d2:21:b1:23:ee:9e:12:35:f5:6c:23:91:25:25:
d6:d1:54:5d:13:7a:29:7a:ee:25:df:0c:76:a3:2c:
e8:33:f8:05:bc:00:a2:4a:bc:d3:dd:18:3e:ef:ae:
8e:7a:b9:9b:3e:ce:bb:3e:0c:02:79:83:5c:af:c9:
8e:d0:a4:f6:93:81:79:f6:4e:cc:1e:a1:72:80:0b:
c3:7a:1b:41:a3:d0:14:cf:b0:98:fc:6c:1f:6d:e5:
2a:09:9a:9e:b8:32:40:08:21:ce:d9:86:96:1e:64:
30:76:0f:51:f2:07:cc:db:4a:46:3b:27:1a:c2:4f:
fc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25
X509v3 Authority Key Identifier:
keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.252.116.0/23
Signature Algorithm: sha256WithRSAEncryption
38:9c:c3:62:c0:2b:9d:04:be:99:fa:46:70:f1:95:52:27:c1:
8e:94:da:5f:e6:6e:1c:05:67:b0:08:50:81:73:79:76:f3:b0:
f3:68:72:40:84:c1:b0:f1:b2:4c:ff:22:2f:42:f9:24:7c:dd:
c5:3b:44:6b:35:53:3c:c1:02:80:21:22:7e:34:18:ed:32:54:
eb:cd:86:7e:87:9e:0d:f6:6c:f3:77:7e:df:8d:e6:d4:ea:4c:
19:6f:3e:a9:f3:2d:4d:3e:b0:ad:74:5f:eb:e0:64:25:50:df:
1f:e2:ff:2d:c1:a6:29:2b:e4:1c:7d:26:0a:af:cd:fc:2d:98:
1a:94:ab:46:29:dc:db:16:94:1a:3b:57:38:8e:cc:60:2e:71:
3a:7c:bd:7f:91:5a:3c:64:d8:1c:ad:ca:fd:32:2c:d6:15:4b:
0f:49:43:df:df:1f:51:d3:02:8d:da:5c:43:80:55:be:9c:fb:
66:91:20:f7:d1:6a:2e:d8:89:b5:a5:67:2c:0f:8f:08:00:e6:
cf:62:f4:af:c4:08:c0:92:ca:e9:62:ca:9b:4a:8a:43:2d:58:
e7:ea:97:32:ff:88:a2:7b:ba:8e:38:d7:72:5a:d1:30:81:22:
41:21:4f:13:61:3d:56:66:ad:76:7d:4c:ea:9a:4a:8b:6d:59:
1c:5f:6a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:25 2026 by rpki-client